Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8420604a-78c3-354a-867d-4cbdeb9953ad.roa
File:                     8420604a-78c3-354a-867d-4cbdeb9953ad.roa (raw, json)
Hash identifier:          pm4fCLTIp+LWBbvsgmeQm8RsshMfHKoCUETavLg73E8=
Subject key identifier:   31:C8:0A:A3:B8:AE:14:DF:A3:30:C8:01:8B:E0:9A:A2:7B:9A:52:4C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E62B34C3B4D4661D93344F00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8420604a-78c3-354a-867d-4cbdeb9953ad.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        172.217.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:34:c3:b4:d4:66:1d:93:34:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=08a0d067-34f6-4a4f-8eee-1b4f7b24cd89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:15:9c:b8:85:77:04:c7:95:cb:ae:de:66:79:
                    29:e3:c6:a4:dd:69:77:f7:c6:fc:63:89:12:05:86:
                    0c:d0:70:cb:5a:a3:ad:38:8f:34:6d:7b:10:35:58:
                    44:69:dd:53:b7:7d:d8:8c:a9:1c:79:59:41:d2:d9:
                    0c:08:57:ca:6d:9b:7a:aa:a8:e1:26:ae:35:de:07:
                    68:0e:c7:1c:43:5e:68:ad:45:b0:f4:62:0f:8f:2e:
                    94:fa:f4:a6:03:79:42:06:18:8a:0f:cf:27:54:1a:
                    94:cc:2d:1f:7f:a9:f7:b2:0f:dc:79:1c:98:67:ce:
                    27:fd:e0:b6:94:04:31:dc:5f:ff:7a:57:40:82:08:
                    ed:84:78:f1:43:84:2d:69:e6:12:0d:2c:5c:7a:bc:
                    55:8f:b5:5b:b3:46:a4:ef:70:12:29:8b:01:7f:31:
                    59:ef:49:f1:40:28:f6:c4:78:07:c0:6e:8d:29:c3:
                    0c:7b:de:41:1b:61:6a:7a:1b:15:18:cf:e2:52:1d:
                    0e:c2:fd:73:b2:10:ff:e5:53:f7:a0:68:d2:cf:16:
                    d7:89:13:74:3e:60:f5:fc:05:7c:db:82:fd:88:ba:
                    56:45:96:2a:bb:fe:69:20:ed:87:e8:77:12:88:4b:
                    6f:e4:45:24:e2:b1:70:54:53:89:8e:d0:d9:b3:8b:
                    ee:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C8:0A:A3:B8:AE:14:DF:A3:30:C8:01:8B:E0:9A:A2:7B:9A:52:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8420604a-78c3-354a-867d-4cbdeb9953ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:79:fc:9a:67:06:98:fd:ca:3d:7c:c2:f0:9b:de:50:9d:
         8d:3c:4f:e1:55:df:1c:46:39:50:b9:3c:28:a4:db:12:4d:34:
         11:3b:2b:19:fc:b1:73:b1:ae:2c:71:41:39:33:8a:f6:89:c8:
         bd:4a:4b:37:21:55:66:c9:78:c4:65:b2:84:a7:61:10:e9:c8:
         06:0e:28:df:d6:de:57:17:3e:92:cf:c2:d8:a5:e6:b3:4f:c3:
         1c:9f:64:d5:f4:02:ed:39:d1:2f:05:d1:7c:80:8d:24:d9:39:
         9e:39:6e:a8:06:2b:97:22:2d:cd:b6:d3:68:12:f8:ba:bd:d0:
         38:2d:b8:01:ee:45:ef:85:32:d8:0e:d1:b7:f8:0b:cf:79:0e:
         a6:5b:1e:06:26:91:e9:68:2b:9f:92:23:1f:25:fc:74:e2:1c:
         ce:86:b6:60:5b:1c:ad:af:45:6e:b5:3f:b1:61:79:92:db:a3:
         4f:95:91:22:9d:64:5c:cb:85:5b:9e:fc:9f:c8:38:8b:8a:b8:
         c2:6b:ef:e4:d3:b5:e2:af:92:40:5e:6e:1f:61:19:13:fd:36:
         dc:83:60:6e:8b:2b:64:60:82:a6:c6:40:b6:60:84:3c:93:bc:
         bb:2d:07:80:07:ca:b6:1d:52:ad:31:5f:03:67:3c:4d:44:cf:
         b4:97:a8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:32:10 2025 by rpki-client